October 25, 2025
Stackers Network Digest — October 25, 2025
The Big Picture
With the OpenInfra Summit Europe wrapped in Paris-Saclay, the community turned its full attention to the virtual PTG (October 27-31) — and the week's traffic was overwhelmingly schedule announcements as teams locked in agendas. But the standout story wasn't logistics: it was a forward-looking call to arms on post-quantum cryptography, framed by Red Hat's OpenStack Security Product Manager as an existential, multi-year cross-project effort. Underneath, governance housekeeping continued, with two project teams marked inactive and a Telemetry PTL handoff.
Releases & Announcements
The TC's R-23 weekly summary (Goutham Pacha Ravi) noted the Summit had wrapped and confirmed the community is 23 weeks from the 2026.1 "Gazpacho" release, with the PTG kicking off the week's design discussions. A TC-and-maintainers session was set for 1600 UTC Tuesday, October 28, and the TC held its first APAC-friendly monthly meeting this week. Two housekeeping items stand out for operators: the ironic-inspector repositories were removed (its functionality long since folded into Ironic), and the Vitrage and Venus project teams were marked "inactive." Their deliverables drop from the Gazpacho cycle; if activity doesn't resume, the teams and deliverables face retirement in 2026.2. The TC is explicitly asking maintainers, contributors, or users to help re-form these teams (determine leadership, fix failing CI). Michal Nasiadka volunteered as TC liaison for Requirements and Release Management.
In a leadership change, Matthias Runge stepped down as Telemetry PTL, proposing previous PTL Juan Larriba to take over (governance review 964516).
Security
The week's most consequential thread came from Jean-Philippe Jung (Red Hat's OpenStack Security Product Manager): "Supporting Post-Quantum Cryptography in OpenStack code." His argument: powerful enough quantum computers to break traditional cryptography are plausibly 2029-2030, which — given the lead time operators need to deploy fixed code — puts the upstream PQC-readiness target around early 2028, and means work should start now. He's urging migration toward ML-KEM (urgent) and ML-DSA (soon), paired with "cryptographic agility" so algorithms can be swapped later. An AI-assisted scan of commonly used OpenStack code surfaced 17 distinct cryptographic modules, 7 of which haven't seen a commit in over two years; he wants the TC to raise urgency across all projects and help consolidate down to no more than about five crypto libraries. This is the opening of a long cross-project effort, not a settled plan — but contributors and the TC should treat it as a strategic agenda item, including at the PTG.
A separate operator thread covered a Keystone + Keycloak OIDC 403 on the openstack CLI (tracebacks in handle_unscoped_token / apply_mapping_filter), pointing at attribute-mapping/permission issues in a federated identity setup — a useful reminder of how fiddly OIDC mapping remains.
Development & Technical Decisions
Persistent Nova features operators keep asking for resurfaced. Sean Mooney opened a thread on persistent PXE boot for VMs (a common ask for reinstall-on-PXE workflows). Nguyen Huu Khoi revived the perennial live-resize question (why it isn't implemented and whether it has system impacts) and asked whether the Octavia load-balancer resize patch could land in 2026.1 — both signals of demand for in-place reconfiguration. Izzettin Erdem reported a Nova scheduler performance regression in a 1200+ hypervisor Kolla-Ansible environment: bulk-creating ~100 NUMA/CPU-pinned VMs takes ~15 minutes (vs ~1-2 minutes on Yoga), with the scheduler repeatedly recomputing pinned-CPU topology, plus instances occasionally getting 2-3 IPs from Neutron. NUMA scheduling tradeoffs (Javier Charne, Sean Mooney's Caracal thread) continued from prior weeks. Dmitriy Rabotyagov chased the last outstanding oslo.messaging QManager backport for 2024.2 (review 958849, awaiting +W) to avoid a behavior regression there now that 2024.1 has merged.
Operator help threads included a Kolla-Ansible RabbitMQ exchange durability conflict on a "fresh" 2025.1 deploy (PRECONDITION_FAILED - inequivalent arg 'durable' for exchange 'nova', from leftover non-durable queues), a question about the nova_cell vs nova database connection in Kolla-Ansible's nova.conf for single-cell deployments (tied to an unaddressed year-old bug, 2088264), and limited Ceph Jaeger tracing (only OSD traces, no MON/MGR/RGW, pending an unmerged upstream PR). A newcomer also asked the standard but important question of how to contribute additional patch sets to a Gerrit change owned by someone else.
Heads Up / Action Needed
- Post-quantum crypto: the TC and project teams are asked to engage on raising urgency and consolidating cryptographic libraries — a long-horizon, all-projects effort kicking off now.
- Venus and Vitrage are now inactive: dropped from Gazpacho; step up to re-form leadership and fix CI or face retirement in 2026.2.
- PTG runs Oct 27-31: schedules are finalized across Ironic, Neutron, Cinder, Manila, Horizon, Nova, Glance, and the cross-deployment-projects group; confirm cross-project slots.
- oslo.messaging 2024.2 backport (958849) needs a +W to avoid a regression.
Community & Events
The bulk of the week was PTG scheduling. Iury Gregory published the full Ironic agenda (eventlet-removal, async/await, redfish/sushy direction, Metal3, plus cross-project sessions with Nova, Cinder, and Neutron). Brian Haley posted the Neutron schedule, Jon Bernard the Cinder schedule (four cross-team sessions: Eventlet, Nova, Glance, Ironic), Carlos Silva the Manila schedule (VirtioFS with Nova; UI testing with Horizon), and Cyril Roelandt proposed Glance cross-project sessions (image encryption/disk-format enforcement; multiattach with multiple Glance workers). Michal Nasiadka and Dmitriy Rabotyagov floated a cross-deployment-projects session (Kolla, OSA, OpenStack-Helm, Puppet). Herve Beraud confirmed an Eventlet-removal session, and Jeremy Stanley urged teams to dedicate PTG time to contributor and maintainer experience, plugging the Flamingo retrospective surveys. Ildiko Vancsa scheduled the Ops Radio Hour for October 31 during the PTG, focused on refactoring ops-related activities. The Horizon team also spotlighted an OpenInfra User Group Kenya session led by a former Outreachy intern.